Tue, Sep 22 · 06:00 AM CDT

Summary
The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. "SideCopy campaign operations typically initiate through spear-phishing campai

Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability,

Summary
A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors are likely shifting tactics in response to recent security controls. "Index

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Summary
Malware already running on a Mac can quietly take over Meta's Muse assistant and use the broad access its owner granted the app, security researcher Patrick Wardle has shown in a proof-of-concept released on September 21. It works by changing a hidde

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Summary
A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator later opened that page, the script could run code on the site's server. WordPress fixed the flaw, tracked as CVE-2

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 2 hours ago.